Automatic Installation Of Configuration Files (J Series Routers) - Juniper JUNOS SOFTWARE 10.2 - SOFTWARE INSTALLATION AND UPGRADE GUIDE 4-28-2010 Upgrade Manual

Automatic Installation of Configuration Files (J Series Routers)

On J Series routers, you can specify a remote server where configuration files are
located. If a configuration file cannot be found on the router s CompactFlash card,
the router automatically retrieves the configuration file from this remote server. For
security purposes, you can encrypt these remote files using the DES cipher, and once
they have been retrieved, the router decrypts them for use on the server.
To encrypt the files, we recommend the openSSL tool. You can get the openSSL tool
at:
For example, if you are encrypting the active configuration file
passphrase is
For more information about the automatic installation feature, see the J Series Services
Router Administration Guide.
. To encrypt the file, use the following syntax:
http://www.openssl.org/
% openssl enc -des -k passphrase -in original-file -out encrypted-file
—Passphrase used to encrypt the configuration file. The passphrase
passphrase
should be the name of the file without the path information or file extension.
—Unencrypted configuration file.
original-file
—Name of the encrypted configuration file.
encrypted-file
juniper.conf . The openSSL syntax used to encrypt the file is:
% openssl enc -des -k juniper.conf -in juniper.conf.gz -out juniper.conf.gz.enc
Automatic Installation of Configuration Files (J Series Routers)
Chapter 1: Introduction to JUNOS Software
juniper.conf.gz
, the
11